Setting calendar permissions centrally...

A common requirement in some organisations is to ensure that everyone has read-only access to everyone else's calendars in Outlook. As you no doubt know, this is hard to achieve, since it normally involves asking your users to set the permissions correctly.

Fortunately, help is at hand via Kevin Snook's SetPerm utility. This excellent utility can be used to centrally set the DEFAULT role on the folders within a mailbox. That includes folders other than the Calendar, such as Inbox, Tasks, Contacts, etc.

The download includes a readme file and the actual EXE. You'll also need ACL.DLL which is included for download here.

Don't forget to make sure you test this program on a test system first.

Neil Hobson

No warranty, express or implied, is provided. This code is supplied here "as is".

Never mind, I figured it out. You put ACL.dll in the Winnt\system directory of the client machine you are connecting from, and register it using the following command...
REGSVR32.EXE ACL.DLL You also must have permission to access the mailboxes, as referenced in the README file; Q262054 explains it.

Thanks,

Tom

Posted by: Tom at Apr 19, 2004 2:44:18 PM

I really could use the setperm tool.
Sadly the mailsoftware site seems dead & mail is undeliverable.

Is there an alternative download site for this tool (and the other tools)?

I have a query. I need to download others' calendar and export to a DB or excel.

1. What kind of permissions to need for downloading the same?
2. Any tool available for the same?

Thanks
Cruz

Posted by: Cruz at Sep 21, 2004 8:25:08 AM

Great app, except it ONLY changes permission on the top-level folders. If there are any sub-folders you're SOL and have to go hand-edit the permissions yourself. I'd REALLY love it if someone could find the source and fix it so that it will give you the option to change the permissions on a mailbox-wide basis, no matter how many sub-folders! I realize this is not necessary with Exchange 2000 or newer, but I'm stuck with Exchange 5.5.

I have tried this app six ways from Sunday and I cannot get past the Run-time error '429':

Have tried this logged on as both Domain admin and Exchange Service Account
Have repeatedly registered acl.dll
I am using the correct syntax
Outlook 2000 and Exchange 2000
Nothing seems to correct this Run-time error. Is there a new security update from MS that hobbles this???
Any help is greatly appreciated.

Posted by: Mark at Mar 9, 2005 3:24:48 PM

Since a couple of weeks I'm trying to figure out where in the world MS Exchange stores a Public Folder's per-user read/unread status. Could it be put in some ACL of sort? Somewhere accessible/manageable via ACL.dll? Thanks for any insight.

--
Giuliano

Posted by: Giuliano at Apr 12, 2005 1:47:17 AM

Hi all,

Can anyone shed some light on my problem....

I have owa configured as front-end servers, when setting permissions
via outlook, for users to access calender info. When users logon via
owa, they can view the calender but cannot write to the calender. They
can only write to the calender if they have admin permissions, which i cannot give.
Any ideas anyone who can help with this..!!

Thanks in advance..

Raj

Posted by: raj at May 31, 2005 4:55:19 AM

Hi all,

For setting calendar permissions centrally, and indeed in general set permissions on mailbox folders and public folders manually or automatically via templates etc., may I recommend our product Symprex Folder Permissions Manager. More information about this product is available here:

http://www.symprex.com/products/fpm/

A free evaluation version is available for download.

Setting permissions correctly, and especially on calendar folders, via the ACL component is no simple task. When changing permissions on certain Outlook folders, you must also change permissions on certain related folders (and in some cases different permissions). Otherwise, users that try to access those folders may run into issues.

I am using exchange server 5.5 for testing purpose.I found this setperm utility very useful.There are various options for setting the permissins in each of the mailboxes.
We have "owner","publishing editor","Editor","Publishing author","reviewer"& "contributor" for each of the folders.
Can you pleaese help what these options stand for??

Posted by: Himabindu at Mar 26, 2006 9:01:07 PM

I need Microsoft Exchange Server, where can i download it?

Thanks.

Posted by: Renato Andrade at Jul 1, 2006 12:09:49 PM

I am getting the runtime error '429' message Active x component can't create object. trying to open individual contact in my contacts folder w/ Outlook. I have microsoft office XP and have no idea how to fix it. I have average computer knowledge. can someone walk me thru it.

A few weeks ago we migrated all mailboxes from Exchange 2000 to 2003.
The migration completed succesfully; all user-accounts where fully functional.

A few days ago we removed the Exchange 2000 server following the MS best practises.
Since then, the additional permissions on a mailbox do not work if they where granted to a mailgroup.
The permissions are visible, but not functional.
The workaround is to remove the permissions, and add them again.

Is anyone familiair with this problem?
And more important: does anyone have a solution?

(It would be nice if Setperm would be able to export settings and import them again)

Posted by: Dave van Lare at Feb 8, 2007 1:09:39 AM

Dave,

Are the permissions granted to a Mail Distribution Group, or a Security Group with an exchange email address?

I ask because in AD, Mail Distribution Groups do just that: they distribute mail. They cannot be used for assigning access permissions. On the other hand, Security Groups can be used for both emails and assigning security permissions.

Maybe this is the root of your issue.

Ben

Posted by: Ben Wong at Apr 23, 2007 7:59:14 AM

If you run in to the ActiveX problem, you need to install the CDO files. These can be found at:
http://www.microsoft.com/downloads/details.aspx?familyid=2714320d-c997-4de1-986f-24f081725d36&displaylang=en